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(57) Abstract: 

PROBLEM TO BE SOLVED : To provide a computer system 
in which whether data are last or not can be 
recognized by a subordinate storage device when a 
regular controller can not be used because of any 
fault or disaster in the case of applying an 
asynchronous copy system. 

SOLUTION: In accordance with a write request from 
a central processing unit 100, a regular 
controller 110a transfers only the position 
information of write object data to a subordinate 
controller 110b. At the subordinate controller 
110b, the position information is held until data 
are actually written. When a regular storage 
device 130a can not be accessed because of any 
fault or disaster, the position information is 
read out of the subordinate controller 110b so 
that the presence/absence of erased data, its 
position or the time can be discriminated. 
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[Claim(s)] 

[Claim 1] In the computing system which consists of a forward storage system which connects 
with a central processing unit and consists of storage and a control unit, and a remote substorage 
system linked to the forward storage system the control unit, i.e., the forward control unit, under 
said forward storage system When a light demand is received from said central processing unit, 
after transmitting the positional information to said substore, without transmitting light data, 
light completion is reported to said central processing unit. Light processing to said substorage is 
performed at a suitable next stage., the control unit, i.e., the secondary controller, under said 
substorage system When said positional information transmitted from said forward control unit is 
held, light processing of being behind actual is performed, said positional information is 
canceled and said forward control unit becomes use impossible according to disaster etc. The 
computing system characterized by making existence of the data which disappeared detectable 
by said positional information stored in said secondary controller. 
[Claim 2] In a computing system according to claim 1 said forward control unit To said 
positional information, in addition, by transmitting the time of day which had the light demand 
from said central processing unit to said secondary controller When said secondary controller is 
made to memorize and said forward control unit becomes use impossible according to disaster 
etc., the renewal sequence of data of said central processing unit The computing system 
characterized by determining the backup file which should be recovered and performing data 
recovery from the time of day stored in said secondary controller. 

[Claim 3] It is the computing system characterized by said secondary controller reporting error 
termination to said central processing unit when the field corresponding to said positional 
information has access from said central processing unit to said secondary controller in a 
computing system according to claim 1 . 

[Claim 4] In the computing system which consists of a forward storage system which connects 
with a central processing unit and consists of storage and a control unit, and a remote substorage 
system linked to said forward storage system the control unit under said forward storage system, 
i.e., a forward control unit, and the control unit, i.e., the secondary controller, under said 
substorage system Two conditions, i.e., a duplex writing coincidence condition, and a duplex 
writing inequality condition are managed as a condition [ writing / duplex ], respectively. Said 
forward control unit If the forward storage for a light is in a duplex writing coincidence condition 
when a light demand is received from said central processing unit Make said each duplex writing 
condition of said forward storage and said substorage change in the duplex writing inequality 
condition, and light data report light completion to said substorage to said central processing 



unit, without transmitting. Light processing to said substorage is performed at a suitable next 
stage: Further When a duplex writing coincidence condition is made to change when all the 
renewal data of un-to said secondary controller are updated behind, and said forward control unit 
becomes use impossible according to disaster etc., according to said duplex writing condition 
stored in said secondary controller The computing system characterized by making existence of 
data missing detectable. 

[Claim 5] In a computing system according to claim 4 said forward control unit and said 
secondary controller In case said duplex writing inequality condition is made to change, the time 
of day made into said duplex writing inequality condition If said substorage is in the duplex 
writing inequality condition when it records on said forward control unit and said substorage, 
respectively and said forward control unit becomes use impossible according to disaster etc. The 
computing system characterized by performing data recovery from the backup file corresponding 
to the time of day which changed into said duplex writing inequality condition. 
[Claim 6] The time of day transmitted to said secondary controller in a computing system 
according to claim 2 or 5 along with said positioning information or said duplex writing 
inequality condition is a computing system characterized by being given from said central 
processing unit as light processing demand time of day. 

[Claim 7] The time of day transmitted to said secondary controller in a computing system 
according to claim 2 or 5 along with said positioning information or said duplex writing 
inequality condition is a computing system characterized by using the internal time amount of 
said forward control unit as time of day which had the light demand from said central processing 
unit. 

[Claim 8] It is the computing system characterized by transmitting to said secondary controller 
only when it becomes clear in a computing system according to claim 2 that said positional 
information is light system access. 

[Claim 9] It is the computing system characterized by what is notified to said secondary 
controller only when it becomes clear in a computing system according to claim 5 that said 
duplex writing inequality condition is light system access. 

[Claim 10] It is the computing system characterized by said secondary controller reporting error 
termination to said central processing unit when there is access from said central processing unit 
in a storage system according to claim 4 to the substorage which is in said duplex writing 
inequality condition. 

[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to the computing system which consists of a 
forward storage system which connects with a central processing unit and consists of storage and 
a control unit, and a remote substorage system linked to the forward storage system. It is related 
with the computing system which improved the data guarantee approach at the time of 
performing remote duplex writing between the storage under said forward storage system, i.e., 
forward storage, and the storage under said substorage system, i.e., substorage, in more detail. 
[0002] 

[Description of the Prior Art] Through the central processing unit, data transfer is performed 
between control devices and the technique, i.e., remote duplex writing, of realizing duplex 
writing between different control devices is indicated by USPS 155845. With this conventional 
technique, if a forward control device receives the command which specifies forward/** from a 
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central processing unit, the data memorized to the forward store will be copied to a substore. 
While storing light data in a forward store to the light demand to a forward control device from a 
central processing unit, the light data concerned are transmitted to a secondary controller, and 
light completion is reported to it and coincidence to a central processing unit after that. This is 
called a synchronous copy. Remote duplex writing is realized by the above actuation. When the 
data of a forward store become access impossible according to disaster, a failure, etc. by 
performing remote duplex writing, it becomes possible to succeed business with a substore. 
[0003] 

[Problem(s) to be Solved by the Invention] By the above-mentioned synchronous copy, since the 
time amount concerning the data transfer from a forward control unit to a secondary controller 
becomes long when the connection distance between a forward control unit and a secondary 
controller is as long as hundreds of km, the access engine performance to a central processing 
unit deteriorates. For this solution, before transmitting light data to a secondary controller, light 
completion is reported to the central processing unit, and the asynchronous copy method which 
transmits light data to a secondary controller behind can be considered. However, in an 
asynchronous copy method, the condition of being light unsettled produces data in a substore in 
light ending by a certain moment at a forward store. When a forward control device serves as use 
impossible according to a failure, disaster, etc. at this time, there is no means to recognize 
whether data have disappeared or not in a substore. For this reason, there is a trouble that it 
becomes impossible to judge whether substorage is usable. Then, the first purpose of this 
invention is to offer the computing system which can recognize with substorage whether data 
have disappeared or not, when an asynchronous copy method is applied and a forward control 
device becomes use impossible according to a failure, disaster, etc. 

[0004] When it has been recognized that data have disappeared, it is necessary to recover the 
data which disappeared. If the data in a certain time are periodically backed up on the tape and 
there is need as an approach of recovering the data which disappeared, data will be recovered 
from backup data, and the time has a method of returning advance of a job. In order to perform 
data recovery by this approach, the time of day which disappeared must understand data. Then, 
the second purpose of this invention has data which disappeared in offering the computing 
system which can recognize the time of day by which the light was carried out from the central 
processing unit to forward storage with a secondary controller. 
[0005] 

[Means for Solving the Problem] In the computing system which consists of a forward storage 
system which connects this invention to a central processing unit, and consists of storage and a 
control unit in the 1st viewpoint, and a remote substorage system linked to the forward storage 
system the control unit, i.e., the forward control unit, under said forward storage system When a 
light demand is received from said central processing unit, after transmitting the positional 
information to said substore, without transmitting light data, light completion is reported to said 
central processing unit. Light processing to said substorage is performed at a suitable next stage., 
the control unit, i.e., the secondary controller, under said substorage system When said positional 
information transmitted from said forward control unit is held, light processing of being behind 
actual is performed, said positional information is canceled and said forward control unit 
becomes use impossible according to disaster etc. The computing system characterized by 
making existence of the data which disappeared detectable by said positional information stored 
in said secondary controller is offered. In the computing system by the 1st viewpoint of the 
above, since it is an asynchronous copy method, the access engine performance to a central 
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processing unit can be improved. Moreover, since the positional information transmitted from 
the forward control unit is stored with the secondary controller, when a forward control unit 
becomes use impossible according to a failure, disaster, etc., it can recognize with substorage 
whether data have disappeared or not by said positional information. 
[0006] In the 2nd viewpoint, this invention is set to the computing system of the above- 
mentioned configuration. Said forward control unit To said positional information, in addition, 
by transmitting the time of day which had the light demand from said central processing unit to 
said secondary controller When said secondary controller is made to memorize and said forward 
control unit becomes use impossible according to disaster etc., the renewal sequence of data of 
said central processing unit The backup file which should be recovered is determined from the 
time of day stored in said secondary controller, and the computing system characterized by 
performing data recovery is offered. In the computing system by the 2nd viewpoint of the above, 
when said forward control unit becomes use impossible according to disaster etc., the time of day 
stored in the secondary controller shows at which time the contents of forward storage and 
substorage became an inequality. Therefore, in case business is taken over by the substore 
system, the data of proper back up time can be recovered. 

[0007] In the 3rd viewpoint, when this invention has access in the field corresponding to said 
positional information from said central processing unit to said secondary controller in the 
computing system of the above-mentioned configuration, said secondary controller offers the 
computing system characterized by reporting error termination to said central processing unit. In 
the computer system by the 3rd viewpoint of the above, it can prevent accessing an old 
generation's data. 

[0008] In the forward storage system which connects this invention to a central processing unit, 
and consists of storage and a control unit in the 4th viewpoint, and the computing system which 
consists of remote substorage systems linked to said forward storage system the control unit 
under said forward storage system, i.e., a forward control unit, and the control unit, i.e., the 
secondary controller, under said substorage system Each has managed two conditions, i.e., a 
duplex writing coincidence condition, and a duplex writing inequality condition as a condition [ 
writing / duplex ]. Said forward control unit If the forward storage for a light is in a duplex 
writing coincidence condition when a light demand is received from said central processing unit 
Make said each duplex writing condition of said forward storage and said substorage change in 
the duplex writing inequality condition, and light data report light completion to said substorage 
to said central processing unit, without transmitting. Light processing to said substorage is 
performed at a suitable next stage. Further When a duplex writing coincidence condition is made 
to change when all the renewal data of un-to said secondary controller are updated behind, and 
said forward control unit becomes use impossible according to disaster etc., according to said 
duplex writing condition stored in said secondary controller The computing system characterized 
by making existence of data missing detectable is offered. In the computing system by the 4th 
viewpoint of the above, since it is an asynchronous copy method, the access engine performance 
to a central processing unit can be improved. Moreover, as a duplex writing condition, since the 
condition of coincidence or an inequality is managed with a forward control unit and a secondary 
controller for every storage, when a forward control unit becomes use impossible according to a 
failure, disaster, etc., it can recognize with substorage whether data have disappeared or not 
according to said duplex writing condition. 

[0009] In the 5th viewpoint, this invention is set to the computing system of the above- 
mentioned configuration. Said forward control unit and said secondary controller In case said 
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duplex writing inequality condition is made to change, the time of day made into said duplex 
writing inequality condition If said substorage is in the duplex writing inequality condition when 
it records on said forward control unit and said substorage, respectively and said forward control 
unit becomes use impossible according to disaster etc. The computing system characterized by 
performing data recovery from the backup file corresponding to the time of day which changed 
into said duplex writing inequality condition is offered. In the computing system by the 5th 
viewpoint of the above, when said forward control unit becomes use impossible according to 
disaster etc., the time of day stored in the secondary controller shows at which time the contents 
of forward storage and substorage became an inequality. Therefore, in case business is taken 
over by the substore system, the data of proper back up time can be recovered. 
[0010] In the 6th viewpoint, the time of day when this invention is transmitted to said secondary 
controller in the computing system of the above-mentioned configuration along with said 
positioning information or said duplex writing inequality condition offers the computing system 
characterized by being given from said central processing unit as light processing demand time 
of day. An error with external time amount can be abolished in the computing system by the 6th 
viewpoint of the above. 

[001 1] In the 7th viewpoint, the time of day when this invention is transmitted to said secondary 
controller in the computing system of the above-mentioned configuration along with said 
positioning information or said duplex writing inequality condition offers the computing system 
characterized by using the internal time amount of said forward control unit as time of day which 
had the light demand from said central processing unit. In the computing system by the 7th 
viewpoint of the above, since it is not necessary to give time of day from a central processing 
unit, a configuration can be simplified. 

[0012] In the 8th viewpoint, this invention offers the computing system characterized by said 
positional information transmitting to said secondary controller only when it becomes clear that 
it is light system access in the computing system of the above-mentioned configuration. In the 
computing system by the 8th viewpoint of the above, although positional information is 
transmitted only at the time of light system access, since it is only at the time of light system 
access, that the inequality of data happens with a forward store and a substore can avoid a useless 
communication link. 

[0013] In the 9th viewpoint, in the computing system of the above-mentioned configuration, this 
invention offers the computing system characterized by what is notified to said secondary 
controller, only when it becomes clear that said duplex writing inequality condition is light 
system access. In the computing system by the 8th viewpoint of the above, although a duplex 
writing inequality condition is notified only at the time of light system access, since it is only at 
the time of light system access, that the inequality of data happens with a forward store and a 
substore can avoid a useless communication link. 

[0014] In the 1 0th viewpoint, when this invention has access from said central processing unit in 
the storage system of the above-mentioned configuration to the substorage which is in said 
duplex writing inequality condition, said secondary controller offers the computing system 
characterized by reporting error termination to said central processing unit. In the computer 
system by the 10th viewpoint of the above, it can prevent , accessing an old generation's data. 
[0015] 

[Embodiment of the Invention] 

- The configuration of the computing system applied to the 1st operation gestalt of this invention 
at the 1st operation gestalt- drawing 1 is shown. In addition, in the following explanation, 
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although forward/** is distinguished by a of a sign, and b, when not distinguishing forward/**, a 
of a sign and b may be excluded. 

[0016] This computing system 1 consists of subcomputing system 140b which is connected to 
forward computing system 140a and its forward computing system 140a, and is in remoteness. 
Said forward computing system 140a consists of forward central processing unit 100a and 
forward storage system 170a. Said subcomputing system 140b consists of subcentral processing 
unit 1 00b and forward storage system 1 70b. Said forward storage system 1 70a consists of 
forward control unit 1 10a and forward storage 130a. Said substorage system 170b consists of 
secondary controller 1 10b and substorage 1 30b. 

[0017] Although determined by forward / sub**, and the user, generally the store employed at 
the time of usual is made forward, and the store which backs it up is sub**(ed). And suppose that 
forward [ of a control unit 1 10, a central processing unit 100, and a computing system 140 ] and 
** are decided on expedient or on logic by forward [ of storage 130 ], or **. Although forward 
storage and substorage may be intermingled in one control unit 1 10 subordinate, in this case, to 
forward storage, that control unit 1 10 is a forward control unit, and turns into a secondary 
controller to substorage. 

[0018] The control unit 1 10 is connected with a central processing unit 100 and other control 
units 1 10 by the link 150. The link control mechanism 120 performs the change of the link 150 
which should be used etc. A cache 170 is memory which stores temporarily the data led from the 
data or the store 130 by which the light was carried out from the central processing unit 100. If 
the data which had access from the central processing unit 100 exist on a cache 170, access to 
storage 130 will not be performed. A processor 160 controls the data transfer between a store 
130, a cache 170, a central processing unit 100, and other control devices 1 10. A directory 180 is 
the memory for storing the management information of a cache 170. A processor 160 performs a 
hit mistake judging etc. by accessing a directory 180. 

[0019] A hit mistake judging means the processing which judges (a mistake) for whether it is 
that the data made into the purpose exist on a cache 1 70 from the location of the data which had 
the access request from the central processing unit 100, i.e., the store address, a data address, and 
a data length (hit). 

[0020] A store 130 is a magnetic disk drive. However, a magnetic tape unit, an optical disk unit, 
etc. may be used. Drawing 2 is the explanatory view of a magnetic disk drive. This magnetic disk 
drive 250 consists of the heads 230 and the control unit interfaces 220 for carrying out read/write 
of two or more disks 240 which record data, and the data on a disk 240. While a disk 240 rotates 
one time, the record unit of the shape of a circle with an accessible head 230 is called a truck 
200. Two or more trucks 200 exist on a disk 240. Each truck is divided into the field of the 
existing regular magnitude which is called a sector 260, and the sector serves as a smallest unit 
(slot) of a data access. When a certain truck 200 becomes a candidate for access, a head 230 is 
moved to the location which can carry out read/write of the truck 200. This actuation is called 
seeking. In this disk unit 250, two or more heads 230 move to coincidence. A number is assigned 
to ascending order from the top, and a head 230 calls it a head number. While a disk 240 rotates 
one time, the assembly of the truck 200 where all the heads 230 are accessible is called a 
cylinder 210. A number is assigned to the cylinder 210 by ascending order from the inside of a 
disk 240, and it is called a cylinder number. 

[0021] The hit mistake judging table is stored in the directory 180. Drawing 3 is the example of 
structure of a hit mistake judging table. This hit mistake judging table 340 consists of next tables. 
Device-address conversion table 300: Having an entry every disk unit 250, each entry stores the 
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pointer to the cylinder number conversion table 310 corresponding to the disk unit concerned. 
Having an entry for every cylinder of the disk unit of 3 1 0: 1 cylinder number conversion table, 
each entry stores the pointer to the track number conversion table 320 corresponding to the 
cylinder concerned. 

Having an entry for every truck of the cylinder of 320:1 track number conversion table, each 
entry stores the pointer to the slot management table 330 corresponding to the truck concerned. 
It is the cache management information of the truck of 330:1 slot management table, and has the 
following information. 

Data existence map 33 1 : It is the information which shows which sector on a truck exists on a 
cache 170. 

Cache address 332: When the sector on a truck exists on a cache 170, it is the address 
information in which the data is stored. 

Pointer 333: It is the information used when performing queue management etc. 
Time of day 334: It is the information for managing the time of day which had the light in 
forward storage 130a to the slot concerned by the secondary controller side 1 10b side. 
RVOL dirty condition 335: The slot concerned is the information which shows whether it is 
renewal of un-to substorage 130b. 

Track address 336: It is the address of the truck concerned. 

Head address 337: It is the address of the head which accesses the truck concerned. 
[0022] The device address conversion table 300, the cylinder number conversion table 310, the 
track number conversion table 320, and the slot management table 330 are followed, based on 
the positioning information, i.e., the storage address for access, specified from the central 
processing unit 100, a cylinder number, and a track number, if the bit to which the data existence 
map 33 1 corresponds is ON, it will judge with a hit, and if off, it will judge with a mistake. 
Furthermore, in performing data transfer, it computes the cache address used as the candidate for 
a transfer by adding the offset corresponding to the target sector to the cache address 332. 
[0023] In order to realize remote duplex writing by the asynchronous copy, it has the RVOL 
dirty management table which manages the data (this is called RVOL dirty data) of the renewal 
of un-to substore 1 30b in a directory 1 80. 

[0024] Drawing 4 is the block diagram of a RVOL dirty management table. This RVOL dirty 
management table 400 has the entry of every storage VOL1 and VOL2 and --. The RVOL 
information 401 and the RVOL dirty list head 402 are stored in one entry. To the RVOL 
information 401, the secondary controller 1 10b address when making the storage concerned 
forward and the substorage 130b address are held. A special value is stored when the storage 130 
concerned has not constructed the pair of forward/**. The RVOL dirty list head 402 points out 
the RVOL dirty list 41 0 of [ for managing the slot of renewal of un-]. A NULL value is stored 
when the data of renewal of un-do not exist. The RVOL dirty list 410 makes the list structure the 
slot management table 330 of the renewal slot of un-using the pointer 333 in the slot 
management table 330. 

[0025] Registration of the RVOL dirty management table 400 is performed when proved that 
they are the time of light system access to forward storage 130a from a central processing unit 
100, or light system access. A central processing unit 100 is accessed to forward storage 130a 
according to the defined protocol. Although various things about the protocol exist, generally, for 
example in the mainframe system centering on a mainframe, the CKD protocol is used. A 
positioning command including the information which expresses the access gestalt (a lead or 
light system access) other than positioning information with this CKD protocol in advance of a 
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data-access command is published. Therefore, when whether it is light system access receives a 
positioning command, in order to become clear, the RVOL dirty management table 400 is 
registered at this time. Moreover, in the workstation or the personal computer, the FBA protocol 
which includes positioning information in a data-access command is used. In the case of this 
FBA protocol, registration of the RVOL dirty management table 400 is performed after data- 
access command receipt. 

[0026] Drawing 5 is the flow chart of registration processing of the RVOL dirty management 
table 400. At step 510, it judges whether it is light system access as mentioned above, if it is not 
light system access, processing will be ended, and if it becomes clear that it is light system 
access, it will progress to step 520. At step 520, it is confirmed by asking for the entry of the 
RVOL dirty management table 400 from the address of the store 130 for access, and referring to 
the RVOL information 401 on the entry concerned whether the store 130 for access forms the 
pair of forward/**. If the pair is not formed, processing is ended and the pair is formed, it will 
progress to step 530. At step 530, it asks for the address of secondary controller 1 10b from the 
RVOL information 401, and positioning information is transmitted to the secondary controller 
1 10b. Thereby, it can notify that non-reflected data exist in substore 130b to secondary controller 
1 10b. The slot for a light is registered into the RVOL dirty management table 400 at step 540. 
That is, the new slot management table 330 is inserted in front of the slot management table 330 
which the RVOL dirty list header 402 points out. 

[0027] In addition, in said step 530, the processing which transmits positioning information to 
secondary controller 1 10b is good to carry out in parallel to the processing which receives light 
data from a central processing unit, in order to reduce the overheads on appearance. For example, 
if a CKD protocol explains, after receiving positioning information with a positioning command, 
a child job will be generated, positioning information transfer processing will be performed, and 
processing of the light command chained with a positioning command will be performed by the 
self-job. By the self-job, after the command chain concerned is completed, and waiting for 
completion of a child job, the completion of light processing is reported to a central processing 
unit 100. 

[0028] Moreover, in said step 530, the current time of day other than positioning information 
may be transmitted to secondary controller 1 10b. Thereby, it can investigate now behind at 
which time data disappeared by the secondary controller 1 10b side. Furthermore, in case the 
present time of day is transmitted, the internal time amount of forward control unit 1 10a may be 
transmitted, but in order to abolish an error with external time amount, in the positioning 
command parameter from a central processing unit 100, time of day is stored and the time of day 
may be transmitted. For example, using the RVOL dirty information 600 shown in drawing 6 R> 
6, positioning information and time of day are transmitted to secondary controller 1 10b from 
forward control unit 1 10a. This RVOL dirty information 600 consists of the command code 601 
showing being a transfer of RVOL dirty information, the substore address 610, dirty data 
positional information 620, and time of day 630. 

[0029] Drawing 7 is the flow chart of the deletion of the RVOL dirty management table 400. In 
addition, in order to realize remote duplex writing of an efficient asynchronous copy method, the 
asynchronous duplex writing job which performs a RVOL light to under exclusive contract shall 
exist in the mounted forward store 130a correspondence. For every fixed period, this 
asynchronous duplex writing job is a job which repeats a run and sleep, and performs deletion of 
the RVOL dirty management table 400 during a run. At step 710, since RVOL dirty data do not 
exist with reference to the RVOL dirty list header 402 of the RVOL dirty management table 400 
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of forward store 130a corresponding to the asynchronous duplex writing job under activation if 
the value becomes NULL, processing is ended. If the value of the RVOL dirty list header 402 is 
not NULL, since RVOL dirty data exist, it progresses to step 720. At step 720, the light 
command to substorage 130b is generated from the RVOL information 401 on the RVOL dirty 
management table 400, and the information on the slot management table 330 concerned, and 
RVOL light processing is performed. In addition, the generation method of a light command is 
indicated by USP555845. At step 730, the slot management table 330 which carried out light 
completion is deleted from the RVOL dirty list 410. If processing is completed, it sleeps for a 
while. 

[0030] The above is processing by the side of forward control unit 1 10a. Next, the processing by 
the side of secondary controller 1 10b is explained. 

[0031] The main processings of secondary controller 1 10b are holding the RVOL dirty 
information 600 after the RVOL dirty information 600 is transmitted from forward control- 
device 1 10a until the light of the data concerned is carried out. In order to realize this processing, 
it has the same table structure fundamentally also by secondary controller 1 10b with the RVOL 
dirty data control table 400 shown in drawing 4 . The slot management table 330 connected to 
the RVOL dirty list 410 expresses a non-reflected slot to substorage 130b. In addition, the RVOL 
information 401 is not used in secondary controller 1 10b. 

[0032] Registration to the RVOL dirty data control table 400 is performed when the RVOL dirty 
information 600 has been transmitted from forward control-device 1 10a. That is, it judges 
whether it is a transfer of the RVOL dirty data information 600 by command code 601 , and if it 
is a transfer of the RVOL dirty information 600, it will ask for the corresponding RVOL dirty 
management table 400 of substore 130b and the corresponding RVOL dirty list 410 from the 
store address 610. Moreover, the activation sushi and target slot management table 330 is 
obtained from the dirty data positional information 620. [ judging / hit mistake ] And while 
registering the slot management table 330 into said RVOL dirty list 410, let the RVOL dirty 
condition 335 of the slot management table 330 be "those with dirty." 

[0033] Deletion of the slot management table 330 is performed when the light to the object slot 
from forward control unit 1 10a is performed. That is, a hit mistake judging is performed based 
on positioning information to the light demand from forward control unit 1 10a, if it is "with 
dirty", after performing light processing with reference to the RVOL dirty condition 335 of the 
obtained slot management table 330, the slot management table 330 concerned is deleted from 
the RVOL dirty list 410, and the RVOL dirty information 335 is changed into "-dirty-less 
[0034] The time of day when the positional information of the renewal data of un-to substore 
130b and its data became renewal of un-by the above will be held, respectively by forward 
control unit 1 10a and secondary controller 1 10b. 

[0035] The disappearance data list for recording the positional information of disappearance data 
and disappearance time of day on drawing 8 is shown. This disappearance data list 1 100 consists 
of the store address 1110, 1 120 disappearance data, and the data address 1 130 for every 
disappearance data and the time of day 1 140 which disappeared. 

[0036] In addition, if said number of disappearance data exceeds a predetermined threshold, the 
storage 130 whole becomes an invalid and you may make it recover the storage 130 whole. If it 
carries out like this, it can prevent the disappearance data list 1 100 becoming huge. As for said 
threshold, it is desirable that it can set up from a customer engineer etc. 
[0037] Secondary controller 1 10b creates the disappearance data list 1 100 with the following 
procedure to the read-out demand of the disappearance data list 1 100 from a central processing 
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unit 100. 

(1) Search the corresponding RVOL dirty management table 400 from the store address with a 
demand. 

(2) If the value of the RVOL dirty list head 402 of the searched RVOL dirty management table 
400 is NULL, since disappearance data do not exist, record "0 n on 1 120 disappearance data. 

(3) If the value of the RVOL dirty list head 402 has pointed out the RVOL dirty list 410, store 
the track address 336 of the slot management table 330 linked to the RVOL dirty list 410, and 
the head address 337 in a data address 1 130, and store time of day 334 in time of day 1 140. The 
number of disappearance data is counted repeatedly, following the RVOL dirty list 410 for this. 

(4) Store the counted number of disappearance data in 1 120 disappearance data. 

(5) Store the specified storage address in the storage address 1110. 

[0038] If the disappearance data list 1 100 is completed by the above, secondary controller 1 10b 
will return the disappearance data list 1 100 to a central processing unit 100. Then, a customer 
engineer can investigate the existence of disappearance data by reading the disappearance data 
list 1 100. And when data have disappeared, data can be recovered from a data address 1 130. 
Moreover, the oldest thing of time of day 1 140 is searched, and it also becomes possible from the 
generation's backup file to recover data. 

[0039] Drawing 9 is a flow chart showing the access propriety judging processing 800 in 
secondary controller 1 10b when access of a forward control unit has become impossible. At step 
810, the hit mistake judging of the slot for access is performed, and the slot management table 
330 is obtained. At step 820, the data of the slot concerned judge whether it is un-reflected from 
the RVOL dirty condition 335 of said slot management table 330 to substorage 130b. If not 
reflected, since data will have disappeared, it progresses to step 830. If reflected, since data will 
not have disappeared, it progresses to step 840. 

[0040] Step 830 reports abnormal termination to a central processing unit 100. Access is 
permitted at step 840. 

[0041] Although explanation of the 1st operation gestalt is finished above, it is as follows when 
the main point of the 1st operation gestalt is summarized here. 

(1) Transmit positioning information and time of day to secondary controller 1 10b before 
actually performing light processing from forward control unit 1 10a. Secondary controller 1 10b 
holds said positioning information and said time of day until a light is actually performed. 

(2) When forward store 130a becomes access impossible according to a failure, disaster, etc., 
judge the existence of disappearance data from secondary controller 1 10b. When there are 
disappearance data, the backup file which should be recovered is determined from the time of 
day of the disappearance data. 

(3) When there is access to disappearance data, don't permit access but report abnormal 
termination. 

[0042] Writing [ remote duplex ] of the conventional asynchronous copy method, when data are 
not recovered although disappearance data exist since existence of the data which disappeared 
cannot be judged, data transformation occurs. Since recovery becomes useless and data return 
several generations ago on the other hand when data are recovered, although disappearance data 
do not exist, cost starts extremely. Moreover, the storage 130 whole must be recovered and 
effectiveness is bad. On the other hand, writing [ remote duplex ] of the asynchronous copy 
method by the operation gestalt of the above 1st, before starting operation to the site of sub**, if 
inharmonious, after it checks, and carrying out data recovery of whether the contents of forward 
store 130a and substore 1 30b are in agreement first from the backup file of suitable time of day, 
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operation is started. Therefore, said data transformation and useless data recovery are avoidable. 
By the above, even when access to forward storage 1 10a becomes impossible according to 
disaster, a failure, etc., business can be succeeded to the site of sub** using substorage 1 30b, 
and, moreover, system stop time amount is made to min. 

[0043] - 2nd operation gestalt - With said 1st operation gestalt, since positioning information was 
transmitted to secondary controller 1 10b for every (every CC chain) one light demand from a 
central processing unit 100, the count of a communication link between forward control unit 
1 10a and secondary controller 1 10b increases, and the engine performance falls. With the 2nd 
operation gestalt, in order to solve this, only when the contents of forward storage 130a and 
substorage 130b are coincidence or an inequality, that is notified to secondary controller 1 10b, 
and the count of a communication link between forward control unit 1 10a and secondary 
controller 1 10b is reduced. 

[0044] Storage 130 takes two conditions of duplex writing coincidence or a duplex writing 
inequality. Here, it is shown that duplex writing coincidence is in the condition whose contents 
of forward storage 130a and substorage 130b corresponded. Moreover, a duplex writing 
inequality shows that the contents of forward storage 130a and substorage 130b are in the 
condition of an inequality. These duplex writing conditions are stored in the RVOL information 
401 on the RVOL dirty management table 400 of forward control-device 1 30a and secondary 
controller 130b. Moreover, the time of day used as a duplex writing inequality is also stored in 
the RVOL information 401 . 

[0045] Drawing 10 is the flow chart of the inequality-ized status-change processing 900 which 
carries out a state transition to a duplex writing inequality from duplex writing coincidence. At 
step 910, it confirms whether to be light system access. If it is except light system access, since 
modification of a duplex writing condition will not be generated, processing is ended. If it is light 
system access, it will progress to step 920. At step 920, it judges whether the storage 130 for 
access forms the pair of forward/** from the RVOL information 401 . If the pair is not formed, 
since modification of a duplex writing condition is not generated, processing is ended. When the 
pair is formed, it progresses to step 930. At step 930, a current duplex writing condition judges 
whether it is duplex writing coincidence from the RVOL information 401 . If it is a duplex 
writing inequality, since modification of a duplex writing condition will not be -generated, 
processing is ended. If it is duplex writing coincidence, it will progress to step 940. At step 940, 
it notifies having become a duplex writing inequality to secondary controller 1 1 0b. It is desirable 
to perform processing of this notice and light processing from a central processing unit 1 00 in 
parallel from a viewpoint of effectiveness. At step 950, the status change of the RVOL 
information 401 is carried out to a duplex writing inequality. 

[0046] In addition, not only the notice of a duplex writing inequality but its time of day may be 
notified to secondary controller 1 10b by the above-mentioned inequality-ized status-change 
processing 900. In this case, the time of day which received light system access from the central 
processing unit 100 is transmitted to secondary controller 1 10b, and the time of day concerned is 
recorded also on the RVOL information 401 . In addition, the internal time of day of forward 
control unit 1 10a is sufficient as this time of day, and the time of day given from a central 
processing unit 100 is sufficient as it. 

[0047] Drawing 1 1 is the flow chart of the identification status-change processing 1000 which 
carries out a state transition to duplex writing coincidence from a duplex writing inequality. This 
identification status-change processing 1000 is performed when the asynchronous duplex writing 
job explained with the 1st operation gestalt carries out the light of the renewal data of un-to 
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substore 130b. At step 1000, as the 1st operation gestalt explained, the light of the renewal data 
of un-is carried out to substorage 130b. At step 1010, the slot management table 330 which 
carried out light completion as the 1st operation gestalt explained is removed from the RVOL 
dirty list 41 0. At step 1 020, it judges whether the renewal data of un-to substore 1 30b exist by 
following the RVOL dirty list 410. If the slot management table 330 is still connected to the 
RVOL dirty list 410, since it is still a duplex writing inequality, processing is ended. If the slot 
management table 330 was not connected to the RVOL dirty list 410, since the duplex writing 
inequality was canceled, it progresses to step 1030. At step 1030, it notifies having become 
duplex writing coincidence to secondary controller 1 10b. At step 1040, the status change of the 
RVOL information 401 is carried out to duplex writing coincidence. 

[0048] Drawing 12 is the instantiation Fig. of the notice information of a status change used by 
the notice of the status change to secondary controller 1 10b from forward control unit 1 10a. The 
command code 1301 which shows that this notice information 1300 of a status change is a notice 
command of a status change, the substorage address 1310 which is applicable, the time of day 
1320 which performed the status change, and the condition code 1330 showing the code of a new 
condition are stored. 

[0049] The above is processing by the side of forward control unit 1 10a. Next, the processing by 
the side of secondary controller 1 10b is explained. 

[0050] In secondary controller 1 10b, receipt of the notice information 1300 of a status change 
changes the RVOL information 401 corresponding to substorage 130b which is applicable into 
the condition of having been specified by the condition code 1330. In addition, the RVOL dirty 
list 410 is not used in secondary controller 1 10b. 

[0051] The status information 1200 of principal and vice for notifying the duplex writing 
condition of storage 130 to drawing 1 3 at a central processing unit 100 is shown. This status 
information 1200 of principal and vice consists of the storage address 1210, a duplex writing 
condition 1220 of expressing duplex writing coincidence or a duplex writing inequality, and 
status-change time of day 1230 showing the time of day used as a duplex writing inequality. 
[0052] Secondary controller 1 10b creates the status information 1200 of principal and vice with 
the following procedure to a read-out demand of the status information of principal and vice 
from a central processing unit 100. 

(1) From the specified store address, search the corresponding RVOL dirty management table 
400, from the RVOL information 401, acquire a duplex writing condition and store in the duplex 
writing condition 1220. 

(2) If it is a duplex writing inequality, store in the status-change time of day 1230 the time of day 
recorded on the RVOL information 401 . 

If the status information 1200 of principal and vice is completed by the above, secondary 
controller 1 10b will return the status information 1200 of principal and vice to a central 
processing unit 100. Then, a customer engineer can check a duplex writing condition by reading 
the status information 1200 of principal and vice. And if it is a duplex writing inequality, a 
backup file with the nearest generation can be selected out of the time of day used as an 
inequality, and data recovery can be performed. The approach of this 2nd operation gestalt 
cannot perform each data recovery, or when unnecessary, it is useful. 

[0053] If there is an access request from a central processing unit 100 to substorage 130b of a 
duplex writing inequality, the secondary controller 1 10b asks for the RVOL dirty management 
table 400 which corresponds from the storage address with a demand, and when the pair of 
whether the storage 130 concerned has constructed the pair of forward/**, and forward/** is 
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constructed from the RVOL information 401, it will investigate whether it is a duplex writing 
inequality. And in the case of a duplex writing inequality, access is refused in order to prevent 
transmitting an old generation's data. 

[0054] Although explanation of the 2nd operation gestalt is finished above, it is as follows when 
the main point of the 2nd operation gestalt is summarized here. 

(1) Hold the duplex writing condition of expressing coincidence/inequality of the contents of 
forward and the substorage 130, to a control unit 110. 

(2) A duplex writing condition serves as a duplex writing inequality, when the renewal data of 
un-are made into substore 1 30b, and when the renewal data of un-are lost, it serves as duplex 
writing coincidence. 

(3) When access to forward storage 130a becomes impossible according to a failure or disaster, a 
duplex writing condition can be read from secondary controller 1 10b, and data can be recovered 
from the nearest generation's backup file from the time of day used as a duplex writing 
inequality. 

(4) Access from the central processing unit 100 to substorage 130b used as a duplex writing 
inequality is refused. 

[0055] or [ that the contents of a customer engineer of forward store 130a and substore 130b 
correspond with the operation gestalt of the above 2nd before starting operation to the site of 
sub** ] — it confirms whether to be an inequality. And if inharmonious, operation will be started 
after recovering data from the backup file of a suitable stage. By the above, even when access to 
forward storage 1 10a becomes impossible according to disaster, a failure, etc., business can be 
succeeded to the site of sub** using substorage 130b, and, moreover, system stop time amount is 
made to min. 

[0056] - difference - of the 1st operation gestalt and the 2nd operation gestalt — (1) — with the 1st 
operation gestalt, the response time of the light processing from a central processing unit 100 
may deteriorate. On the other hand, with the 2nd operation gestalt, there is almost no response 
performance degradation. 

(2) It is necessary to recover the whole storage with the 2nd operation gestalt to a thing 
recoverable to the data unit which disappeared with the 1st operation gestalt in recovery of the 
disappearance data after a failure and disaster. 
[0057] 

[Effect of the Invention] If the renewal data of un-to a substore are made, since it will notify to a 
secondary controller that the positioning information or an original and copy duplex writing 
condition is inharmonious from a forward control unit according to the computer system of this 
invention, when a forward store becomes use impossible according to a failure, disaster, etc., the 
existence of disappearance data can be judged from a secondary controller, and it becomes 
possible to cope with it appropriately. 
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#«->x^A{ctei>-c. BJIB^SSt^-gtt^«. 5 
F^Ti"fe^-C*SC4*5*lJWL-fc4#©^ nCM 
SMSPgSKilfcnr S C 4 **5f®4 f Stf-gS^X ?-A£ 
tUftfS. ±iBS&8©@l'&KJ:Sttll«S'X7"Ar-U:. 

20 ngri'-b^©4*©*rss^^-at^©3i»i 

£tf IEfBt£&B4giJfBtf KBT^- *©*-&# 

[00141S1 0©JS*r«. ±12^gg© 
IBttJSai'XT-Altfc^T. milB4i*Mffi^a*f>. bu 

iazia# # *-mii&x$> ^njiBt^a«:*f otrft 

^*5*-^fcJS^{C. B?IBSJ$i|ffllga«. i7-*?7*B5 

iB^^ffl^atcfR^-r^ c 4 *«FiS4-r strati^ x 
f A^ffi^-r^. ±e»i o©a*{c<ts^©tS'>x7" 
30 At?«. iBitf^©f f -^«:ri'-fe^-r-2)©*w±-r.sc 

[00 15] 

[^^©Utt©^.®] 
i 

©a, bfcfcOEWStf. IE/BI?rK»lJl/J5c(r>4#«: 

[0016] C©H-|MS->X:rA 1 «, IStiivXr 
40 A 1 4 0 a 4. -e©iEtf«t«^Xf-A 1 4 0 a«C«^3 

nflojaraccAssjitfita^x^A uob 4*^^ 

StlX^Z. wlBiEI+SCta^^Al 40a«. iE4>* 
«!ffll«ai 0 0 a 4. IEi3tr>X-fAl 70ai*6» 
fiSStxrt,^. mrlBSJH-»»'>X7"A 1 4 0 btt> a* 
AMSHa 1 0 0 b 4. iEfBtt~>XrA 17 0b 4*>e. 
fltfiSSft-CO*. HUlBiEIBS~>Xf A 1 7 0 att. iEM 
«B 1 1 0 a 4. lEIBttSSsB 13 0a 4*>e,»^$4a 
ImIBSJIBKv'Xt-A 1 7 0 b B, SJ^WSa 1 
10b4. iOIBt^ai 3 Obtfrhmi&ZtlX^Z. 
so [00 17] I/iini. a-if«:j;o-c^Sh€.*i. 



±, MPSSl 10, **»S^S1 oo. tm«^x 

8P»gi i oetk, iEietggg<tsjietti&g#g&^ 

&C C©»^CCtt % ^<D$j®ggl 10 

[0018] hhbsb i 1 on tp&*mgim 10 0*$ 
ct^aaggi i o<ty>* i so -cassis tirc^ 
s. y>**MMii 2 on *6fflr^*u>^i5o 

©*«H3*tTtt5. »f» 1 7 Oil Wi&Sg 
HI OOfrZvJ bStitcf-Z&ZWtiStimtill 3 

1 3 0^©7**Xttfir&t>fcl*. ^DH2y*16 0 
(1 KttSS«13 0. +tr>al7 0, #i«£®§Sg 

ioo, f6cD$oaag8i i omvr-zsmzffl'm 
isthvi sod v 5/* 1 7 (xommm 

tt, F U 1 8 OS^-feXTaciCCfcoT* 

tooi9] t >> f x xwstn tp&smgm i o o 

sf-mt?^ i 7 o±*c??aE-rs 
is* ux) 

[0020] fating i 3o«, s^fv x**arc* 

&o fib, SSf-7lI«f^^j:«t^ 
**>4l\ 02(1 0»^X*S»D*WBr**. 

fl£>r^X^2 4 0 £ v 7WX£24 0±<D5 S — *iU 
-F-54FT4fcfc©^9F2 3 0<b, MfflHSg^> 
^7x-^2 2 0*>6«aSnS. 7WX^240#1 
HR-T SPiBec^ * K2 3 0*7^-feXpJfig^R«<Z)IB^ 
mfi*h7^^2 0 0iP?-ii G h7^2 00«fa 
*2 4 0±fc««ffl#tt'ra. Sh7^tt«>26 

o 4 w«i £ & s & £ o 3 ofRitfec^ai 3 nr t * 

f) ttth. ^§h77^20o^rn^mo 
fcm *©F?7*2oo*y-F7^Fr*s<&Hcc 
K2 3o*»tt-ra. comtz^-ztns. c 

©f^^2 5 0m Jg»<D^? F2 3 0j&*|3JI$ 
^ y F 2 3 0li±*^ff«(c«^(=rw3h 
tot, *n*^7 F#^4BfA. f^^240^i 
iHsrsracc-r^-c©^? F2 3 o*J7*-fexnjte«c f 
^7^20D©**o*s/i;>y2 1 ot^A. i/y> 

#2 1 0CU*7^X*2 4 0<Dft»6lfJ®tC#^tt# 



(5) #H¥9-325£17 
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3*lTl>T, *ti*t/y>^»#4P?^. 
[0 0 2 1 ] 5wl/*MJ 18 0rtfctt, b?MXtt 

7"-^K!!>flKS«r*S. coot 7 F 5^«SE7"-^ib 

8B7FUX»JtBII3 0 0 : ^^^12 5 08^ 

>F>;*»ft, zti^txDxybvimwiTjxtmm 

fc»^*2/y>y##ftj£*3 1 0^<JMW>**t& 
10 > y > #*-5t*tt£3l 3 10: -KDt h x >?$m<D>> y 

>^stcx>F y*»fe, *n-eti©x>hytt^a[^ 
y >yfc*ft&rs f 5 ^ ^s-^*fj£*3 2 o^©*^ > 

F ^ v *##JWE(i3 2 0 : -o<D-> y >#<D F 9 v 9 

«tcx>hy£&£> *n-e<i©x>Fy«^«[F^5r 

*£#J£-T£xci? F^S^3 3 0^<D#^>*£ft|ft 
XP7 h^&H3 3 0 :-oC0h7^©ttr>af 

+ vis* i 7 o±ccff«Er«a»»«jRrimi-cft&. 

tt»^»7FUX332 : F ^ ? *±0-fe**#+ * 
70±CCS«E"r^<tt, *©7*- tl 

ri>*7 F u*ltMr*5. 

^>r>^3 33 :*a-«a**fT*5e«:ttWf*i» 

mM3 3 4 : Sfc^O? FK*J 1/TjEEttttlK 13 0a 

«c*$i^r ^ y ho«o^^nmnr$aM( 11 o b w 

30 RVOL^-f >«»3 3 5 : ^XP 9 F^BIiBtt^a 1 
h7^7KbX336:Sth7^ ^©7 FUXt?* 

So 

F7FUX3 3 7 :%mb^ vttcrttXtZ^ 
j FCD7 Fl/XT*S. 

[0022] **»ataii oo*6tgjes*ifcfi«ff 

WtMR , *-ttt>^7^-fexa*(DiBtt9SK7Fi'^. ^>y 
>^S^, F^?^a#*»CC, «K7FUX»j£li3 
0 0. S/"y>y»9»(B«3 1 0. Fv7^#^tc^ 
40 32 0. XD* F^Sa3 3 0^r/ccb'0, f'-^W^v 

77*33 i®*tjtrr&t?9 F^t>t^tft7 F4« 

a«tf&9«^(C». tt7S/a7FU^332(Clfi 
<D*2 F^rttJASC<bCCj:-Qr, 
•eSMft&«c«+^ r>a7KU^9(HtS. 
[0 0 2 3 ] *ra«3t-Ccj:4jilBrS»#*ieHr 
Sfctofc, BBBtt^Sl 3 0 b^Q^MSfc^r-^ (C 

^fIMf-< U ^ F y 1 8 0(CfcO. 

so [0024] H4tt. iwxy-^^«a«o«aiar* 
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RWLW84 0 1 <!:, RVOL^-tw UX h^y F4 0 
2im^^tl^. RV0Ltt$S4 0 lfctt* ^RE« 
»B*jE<bOA:it<DBI*iJtBa?iSl 10b7FUX*$J: 

owkkb i 3 o b r r ux^sm-** ^ttaett^ 

gl 3 0^jE/a©^7*^rt*4^»^l31®|EttiB 
jWftWStl*. KWL#— 'JX F-^* F4 0 2tt, * 
g$rtf>X u v h £gSt~£/t&<DRV0L#-T U X h 4 
1 Ofcjg-f. JBf©?- ^3W?ftlftl^(CliN U 
LLffi#tt»3*l£. RVOL#~7V VXF4 1 0« % X 
n h^S^t 3 3 0 ft<D* ^ > £ 3 3 3 £J?H>T*H3r 

<DV$>*> 9 

[0 02 5] RVa^-^-f ^1*4 0 0©fi»tt. 

aa^g 1 0 oa>6iEfett8gi 3 0 sl^<d7<< bmr 

KD7'D ha^*s-«««c«aSfir^*. COCKD 

ffiKW^waaxfecc, 7 ftzrnm ( »; - f sfctre ^ 

t7£tt£o S£-?T, YJhTZ^*fr£*>Mt. {ig 

RVOl^-fw ^a^4 0 0<Dg&£t7&5o -7- 

F«C{MBf=rwtt**dtoFBA^P h^ffli^nr 
^S. CCDFBA^P hnMDig^fCtt, r-£7£^ 
X37>FS«fi RV^~fwga3l4 0 0CD^£ 

[0 0 2 6] H5tt, IM)L^^Wi*4 0 0©S» 
«HI©7P-^^-hr*S. Xf77'5 1 ± 

7*-fe*r&whtt*a*»7u 7^^txr 

^>€>C:<!:^^Tn^X7 : -'>y5 2 0-siiO o Xt^:?" 
5 2 0 7 ^-bX>Wm©ietg»g 1 3 0 CD7 F UX 
*»6RWX^-^^Sa*4 0 0(Ox>hi;*Sc«), 
X>h l/©RKXt**B4 0 i*#JH*rsc£«:i-ot. 7 
^■feX»»©8BtBS« 1 3 OaWE/BI©^7«B0ELT 
W*£5Mfx^f5. ^7£Jfr£0Tt>fttftt 

^it^o Xf^53 Otlt RV0Ltf$84 0 1 frfeBHM 
®&g 110b (07 F UX^T 4 «OBJimPi!3K 1 
1 0b«c»OTttJlf*Wlll«*(BaS'J-S. cnccjro, 
BJKttSB 13 0b fC*J£$fcDr ~ Ztm&t 6 C £ £ 
BtfMiSKBl 1 0b«cii»i-rsct**ffl*5. 
5 4 Om RVa#-?vSffl«i4 0 0fc5-{h*«U 
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F£g&1-£„ ?%:t>*>. Rva^-r-f »;x h^-> 
y4 0 2©fgrxay h«a*3 3 0©B}(C, $r*<DX 
P? h^a^3 3 0£»AT&. 
[0 02 7] Sc*$, l?IBXr»> 75 3 0(Cbl>T, MIJ3HJ 
fflJggl 1 Ob«cfi[B«tft(m*^f*«ffl«v a* 

7-t«aaww37> kcc*w >-r<&w hnv> f 

>*«7im ^3 7*^7^^t^6wi 
Kg 1 0 0 (t*f t r 7 ^ h jmbbt £fg£T *„ 

[0 02 8] iiufexr y 7*5 3 0K:kl>T, gijfrj 

Mn&utcfrzwBmmsi 1 0 b«racca^sci 

20 B. iEMBSBl 1 0 a©«TOIB*«aorfeJ:C» 

6^-TRva^r ^tt$86 0 Ofci:0, ffiBf*Wt»« 
■teiWeSiJli, JEfrJSPggl 1 Oa^6BIHfl3^Bl 1 
Ob-lK^^n^. CC0RVCX.y-r^tffR6 0 0(1 RV 
a^r^ ttfgco^r^ £ c <b 37> Fn— F 
6 0 1 i v BBetSSB7FUX6 1 Oi, *t-?~i?- 

z&mm§2ot, «aa6 3 0i^&»«Estis. 

30 [0 02 9]H7tt» RVOL^^.YWaa4 0 0(7)BIJ^ 

&JEIBtt%81 3 0 a*tJCE5CRV0L7>f F^r#ilW:j|tfT 

HJHrfi**^a^» k -^a3SCC x 7>i^«j-7' 
i^0iI*r^3^-C, ^>**CRV0L^-f*^ i ga^4 

oo©fiij»»i*^f-rs. xr^7 1 oru, Hif 
*o*H«int*y 3 ^«c»i6rSiEattaa 1 3 0 

40 ^^4 0 2*#JRL, *Offl(^NULL>i6tfRVa^- 
r^f-^ii#fiL^t^ «ffl*»7"rs. RVDL^ 

, JXh^^4 02WNULLt^6 
tt, R\0_^-f*-Yr-^^#l5E*r^<Dr, Xf7 7'7 2 
0^iitf o -;7'7 2 0t(t RVOL^-f* ^^3^4 
0 0<DRVOLtt^4 0 1 iSSXP? h^a^3 3 0Oti 
«£^6BfflBtt^Bl 30btc»f4^-f hnv>K* 

> K©*J5aE*S(Col>r»W*tf U SP555845CC 

isissnrc^. x7 u ^7 p 7 3or«, 7^>^7i/c 

50 XD * bt>a3l3 3 O^RVay-r-f VXF4 1 0^€> • 



tmtz. temper *z>l. u«6<xy-7-fs. 
[0030] «±^iE»^g 1 1 o zmowmvb 




[0037] i iobit **»aiSB i o 



[003 1 ] BJM93B 110b <D£ft®gfcJ:, RVOL# , Mffe^- J^HIOO *JW>JWc J: 0 ft* 

-ft»*6 0 03WjE«8Piail 1 0 afrh&MZhX 
*r*6, ^WL^-Z&vJbZtlZZ-COm. RNO_^ ( 1 ) »*(Z>*ofcEtt36lKr K *fJfcf*RV 

£l?3IT£fc#>, aHHWSBl l Obtt. BUCCAL (2) ^U/cRWL^^^^ffi^4 0 0(ORVOL^r 

tcm>L#~7-4 5 : -2mmm4oo±m*m&m-<>? < f4 0 2<^#null&6, as^t 5 -* 

-^OMUi&fcfco. Rvay-7v <J*F4 1 0Kl£&2 10 im&LKitXDV, m9cf-*t%Ll 1 2 OK "0" £IB 

n/cxp 9 h^s^3 3 o#, ©jiete^B i 3 o b^* mtz. 

EROXD* F SUfrJfSPigg 1 10bt (3) RVOL^-fw UXF^y K4 0 20ffi#RVOL^- 

Rwxt»*4 0i«. ttfflsn«cc>. h4 i o*}gt/cc>*&6, *©RVCL#--7W 

[0 03 2 ] 1^#-7~<?-ZW&m4 0 0^<Dam "MM 1 OtCffiROTC^XDy hggg|3 3 0<Dh 

£M9^S1 1 0 a*6lM)L#~fwtt$86 00* 77^7h>X336, ^> KT YVXZZI^t-Z 

IBi3nT*fc«FCCtf«ctotiS. -r«c*>%, RVOL^-r 7FUX1 13 0K*8ttU ^J3 3 4*^l 140 

-<7 r -drt»«6 0 0©«2S*»^^*»«:3V>F3-K6 tCfSW^ tft£, RVOL#-r ^ y X h 4 1 0 *fc£ 

0 1KJ:oT*teU PMX.y-f -fl»*6 0O©K3Sr 9tt#6. IMiBU ffl*^— F bTl> 

*ti«. ^©fattKBr f 6 i 0*6, *ttW*« < . 

iBttgBl 3 0b©Rvay-f--f«i^4 0 0*jJ:CXRV 20 (4) > F bT ofcjBjfe^- ^SterB*?- 1 

0L#-r * F4 1 0*3R«>S. */c Z-tjt- 1 2 o s. 

*fiMHMI6 2 0*6 1 * F S x«S*HtfTL. ( 5 ) JgJE.ShfcBttMBT F l^**EttiSB7 F 

i^Dy hW®fl3 3 0£J#£ o ^LT. ^4>XP 1 1 1 0Kte*frf£ o 

? F^a^3 3 0*S?fBRVOLy-7^Y !/* F4 1 OCtg [0 03 8] £Lh(C J: # U ^ h 1 10 0^ 

*©XP* F<g^l3 3 0<DRV0L#-r fiW S i / HSJtSlSB 1 10b(t ^*MS^B 1 0 0 

-ftt«3 3 5* 4, *-7^**r iT-So 1 1 oo£ii&T£„ *cc. «g= 

[0033]xd^ h^M^3 3 0CDBTOJ, IE$«g Mtf\ iB*^-*W^h 1 1 0 OfcHaaWCifcJ: 

Bl 10a*60»tf*XD^KcJ»rs^-f ht»fL 0, y8*^-*©#**fJB-<£C <t#Hi*3. -ei/T, 

fe«f«CtT«c*>ti&. T«rt>%. JESHjgpgBl 1 0 a*6 ^-^»5fcOTOfc»£Wi. r-£7 FUX 1 1 3 

<7)^ Fg*tt*toT, {4B^^tt«4rS(ct*> h^x 30 ofrh?-zzmfofzztttm&*> 9 tic. mm\ 1 

-t^«M3 3 5*#JHU "y-?w**r &6tf. ^y-YJU^^-^iiiar&CifeDltBi&a. 

^4 F«8*Hffl/fcfk RWDL^-f*^ UXF4 1 0* [0 03 9] H9«, fl3Wffl88B#7 ^XFiiJfiBKtt 

6^XP? h^gg|3 3 0£BiJi&U RVOL^-rvti ori>S»^©BJWtBiBB 1 1 0 btefctt^T *-fe*oJ 

«3 35* M ^-f «c(^- cc^irra. miimmso o%m?ya-?+- ft*s. xt-? 

[0 03 4] KUiKJ^T, BIsBttKBl 3 0b«c»-r 7*8 1 7*-fe**HUP? F<Ot ^ h^X^ 

£*S§f r - ^ QXiBtSfafe J: V*(Dt- Z #*H$r <!: *»fLT, xp. F§S«3 3 0^ff^ o Xf^*8 

^o/c^J*. iEfJ^B 1 1 0 afei^SHSUtaiSB 1 2 0tit SuldXU y FgS^3 3 0(DRVOL^-r ^tt 

1 Obr^tl-etiffJtShSCtCC&i. ,^3 3 5*6, KD^-3r*BJIEtS^Bl 3 
[0 03 5 ] 08CC, JH^-dfOttBtWR. ffjWII 40 0 b«c*SK*f^**fljers. *SKr**a«, 7= 

^IB^-r ^> tcft<Dm&T- C<D?^r -^3WB*0"CC»Sfc», Xr ^8 3 O^ilfc. *S 

-^»;xhl 100tt. BEttSIBTK^l 1 \0t, WVKVtitt. F-Ziim&lrX^tt^ltlb* Xf^ 1 

iBJfe^-SMRl 12 0i, t^^^^tOr-^TFU 8 4 0^jt^„ 

XI 13 0*$iyffijfel/fc^9l 140<h*6«^M [0 040] Xf^'830m **^S^B100 

[0036] a*, friers*^- ^a^S(DH<i^a ^-fex^^pjT^o 

Kfl^Bl 3 04*WWWc«cO. G«9!g81 [0 04 1 ] ia±r»l©S*i»«©«W*»l4^ C 

30^*B«T5i5(ci/cfcJ:i>. C5"T*i, m cr® 1 OHtk^S<Dfi.^«S iat>5i*©J:5«c«c 
^f-^'Mh 1 1 OOjWIfeAcCc&a^ilEftCCiWtB 

**. HTIBHflltt. fiFSFJtttf *6R5&C#5©3W* 50 ( 1 ) iEWIttBl 1 0 a*65-f FAHitgQSKfT 5 
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■cte<„ 

(2) IMF. JSS^tCfcOiEietiggl 3 0 atfriHr 

(3) m^T-^icnLX7^^^ffiibr>icW,^t. 7 10 
[0042] S£3»WD#^«B3 f-^ODMPS-Stftr 

- *#?¥£EO&<,»K: t>frfrt>h? f- a»©0«*ff o 
fcJ^fctt, B«fl^tf*Mticft9. x-* 

K.m6tc&. i*t3^ fstgssgi 

3 o£#£B«u<c< -r, &*#si>. cn«: 

*fLT, ±IB^l©Hm<SIK:J:^|5l«3f-^;© 2 o 
£fi§:is#i*-ctt, SHU©-?-/ h-cjiffi£B#rr£ff 

K. *"f JEfBtf&g 13 0a <bSdiBtf^S 1 3 0 b©rt 

3iff*l»«»»c«l:->riEEt»Jii lOatcSWSr;' 
•fex^pjslcc^oytJ&^'Cfc. sjietsss i30b* 
Hflii/'CiBituiH©^ hr5i*«t«ctj»»r*. o 

[0 04 3] -ff2©Htt».«- 

Mfaif? i ©Ute^rtt. (j^a^g i o o a> 6© 1 

B© 5 -f h ( C C f * A >m ) 1 1 

obeciigmfitfs^sitr^ftifc*. jEtmiai 

1 0 a imSHjfflJgg 1 1 0 b©IH©aftB8?#£ < ft 
0. ttge*5<STTS 0 CtiZM&TZtcisb. ^2©HJS 
^SS-C«. iEIBt^g 1 3 0 a £ SJf BttSEl 13 0b© 
ftg*5-g(*M>«*-gc©£i*©^ -?-©Ci*Si]©l 
Slgg 110b tcjlfciu jEMOSB 110a £BCHa 
£g 1 1 0 b©R8©iHtB&£8li?liTr*„ 40 

[0044] fBtSHg l 3 Ott. urns^-a* /cwr 

Sgi**-a©2tttg£££. CCT. -fi#i*-S:£ 
«, iEIBtS&g 13 0a igiJIBttgg 1 3 0 b©[*fg# 

£«, iEIBtt^B 13 0a £SJgBtt£g 130b ©fig 

w-a©tfc«-c*5ci*^-r. cti6©-s»^tt 

All. E*lia«g 130afc<t CFMM&SM 13 0b© 
RVOL^-f-^«ffi^4 0 0©RVat*«4 0 1 KtSttOT 
*J<. '*fc. J^MM^ittofclSSBIfc. RVOLtSfR 

4 0 HctgWl/rte<. SO 
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[ 0 0 4 5 ] B 1 0 tt. rit#-a*6rif#T>- 
gc(ctms^3-t*S^-S:^tt^il«iffi9 o o ©7 a 

-ft-lf**. Xf?7"9 1 0T». 

n«\ -«i*tt»©sai««&i/tti.>©'r. isii£** 

7"tS. h3RT*-fe^-C*tltt. Xf : »^7'9 2 0^ 
Mts. Xf-; 7'9 2 0 TB, 7 f •bX^CIBtS^g 1 

3 o *5iE/gij©^T i> s*> f 5 *>*Rvat»« 

40 i*>6«e-fs„ ^T*»rttri»ttw*i«. -S 

»*tf»©£i5tt8£0&t»©"E\ *5JI£&7*£. ^ 
T^fiSb-Ct^cig^H. Xf -^9 3 0^jitf„ Xr 
v^9 3 0rtt. ^£©^fi#£t^#S-fi#*-&#> 
£^a>£RV0Lf#*84 0 -fiS^^-gC 

***7-TS 0 -SSI?-i!cT-*n«. Xr?7'9 4 0-- 
ilif. Xf »^94 Orti. BflWgl&gl 10bCC*fL 

*>6> c©ji*o©*!ia£. cb^^iasigi 0 0*^6© 
^^!la<i:*. MtfL-rif^^©*^*^^. 

^9 5 0r«. RWDLlf$R4 0 1 SUMS^-gCfttK.^ 
[ 0 0 4 6 ] ±Se*-grttttSs£M*!iJI9 0 0 

■c. ~asifHF-g(©ji»i?'cwr)&:< > zomnimm 

9»m I 1 0b(Cfflft)0-CtJ:t^ C©»^> tfJfftMS 

Slg 1 1 0 b^lBaSL. *»OHV0LflHI4 0 1 «cfe^KB# 
SiJ*iei5-r^. <C*», CO%H». JESlffll^gl 1 0 a 

©rt*»ar«>m>i/. *j^!ia«g 1 o o*>6^*6 

tismrcfcfii*. 

[ o o 4 7 ] b 1 1 (J. 

aKtt»a»s-&i^bi«BEWi8a 1 o o o <ov o 

-f-f- C©-a^tttJB0E»Hi 10 0 0 

B. m 1 ©«6S0!SrSiW Lfc#BJHrg»* ^ a 
aSBfl^S 13 0b (C^HSrT 1 - * h L/cKSfK:^ 

tfstii. f7 , iooom i ©lut^ffi-cssi 

WLfc«t^(C*BRf s -**BIE1BSai 3 0bK*fL 
"CSiWL/A:<t^tC7^ h^7LUC > htffif<3 3 0 

*Rva^-r^ >;xh4 i o*>e>^-r„ xf^^i 02 

0-Ctt. mxV--7--< h4 1 QZiciZZ>CtK.i. 
•3, SdiBte^g 1 3 0 bKtt^-SsfcER^-frjWaET 
S*»i'^*>*fllWr-5. Rvaf-f-^ 'JX H4 1 Otcx 

^-a©**-c*s©r, «a&it7-r&. rvol^-t- 
<';xh4i ouo» h«a^3 3o*i«tfts*Tci» 

1 0 30^jitf. Xf^^l 0 3 0T«, 

iJio/cci^gdSiJ^gi lObcc^ai-rs. 

7* 1 0 4 0 -ett. RvoLt»$84 0 1 *rfi«*-atctt«l 
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[0048] m\ 2«. Eimmwi i o afp^mim 
ami i o b«:^-r^tfc®a:M(Djittrftffl3^stt.?g 

£SiI*DtS8©Wn0T*£. C©tK5§£SiI*0t«fil 
3 0 0tt. t£®£M&»3v:/Kr*&t££7jrf3v 
>Fa- F 1 3 0 1 4, fl^ittSSJIBttgaT FU* 

1 3 1 0 i. ttiKH*fftt-»ft:^!!l 3 2 Oi. frltf 
«©a- F4^m«3- F 1 3 3 0 &*>ttM3ti&. 

[0049] «±*iiEiijffli«§ 1 1 o imomv$> 
•a. we. niNMi i o bffl©Ma*i»wrs. 

[0050] vmmm nob n*. Kfl&jgafcrtir 
«i 3 ooMMfii. ^n^ftsmettsai 1 3 o 

bicm-bftmmmi o 1 f i 3 3 o-cjg 
sstifctwwcswrs. a*. sjumneai iobt 

tt. RVDL^-r^ h4 1 0ttffiflIt,tt<<>. 

[ 0 0 5 1 ] m 1 3 tt. tettgg 1 3 o©ra#t«.® 

£**&Sgg 1 0 0 JcjlftT S^OOfttStiM 1 

2 0 0 £^?„ COjEBttftBHHI 1 2 0 0 tt. IBttgg 

rFuxi 2 i ot. -»s#-gt*stHa-ffi#t^ 

-H»*«-rrffli*tt« 1 2 2 0 4. -S»£*-S(£ 

b-,tcmmzm?tmmmm 1230 
s. 

[0052] m$m%mi 1 ob«. ^msssio 
0A^6©iEiiJt*:]im^©^aiLS*«:»L-c. em* 
ssttffl 1200 t*©#*K«fc » ms-f 

( 1 ) iBestifcHttiarr fu**>6. >pftt.-r^,Rva 

5f-7V®Hl4 0 0£tfc3IU RVOLtt$64 0 1#>6. 

rs»*tt»*ffr. msrai 2 2 o^tetfrr 
s. 

( 2 ) z:ss*HF-acr*n«. RvoLt#«4 0 1 cc§b» 

zwcm\*wmmm\ 1 2 3 Ottawa. 
k±k j: *) jEsmmm 1200 #s&atr * t . bomb 

gg 1 1 0 b tt. #*Mai£g 1 0 0 (ciEfflt&BflHl 1 
2 0-0*iBST3. *C"C. fiftFAtt* ESM«8fit#l 
2 0 0%M»tU-rc&tcJ:0. -£##ttS&&SiSf * 

c£#tti#s. -eur. -fi»**-&-c**itt\ 

JWfcjKftUb. f-fBatffft^Ci^W**. C© 
»2©H*S^S©^tt. flftO^-jtBttPCftttl* 

[0053] *5W5S«S 1 0 0 a»&r*»**-»© 

WEttlMl 3 0b«:»LrTi'-bX^*s*- 3 fcf>. 
«®MH0KKK 1 1 0 btt. fcEtBJlSir F 

ux*6#it.TSRvay-:^wgSHoo£5i<tf>. z 

©RV0L«$84 0 1*6. ^SIBtggg 1 3 OWE/MO 

i/T. ^«»**-«©Jtatt. iBttK©^-^ z&m 

[0054] ttJtt?* 2 ojtfraaoimtitsjp. c 

c -e$ 2 oxMomona* * 4 »s «t 5 ectt 



(9) »H¥9-3259 1 7 
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5. 

( 1 ) zEfcitfsjietiita 1 3 0 ©rtg©-@c/^-a 

**r^«»*tt»4«Wffll 1 1 0 Kfi8»T4. 
( 2 ) ZA*«Ktttt. MiatKMEB 13 0b CC*Mff 7= 

tfik < tt -a /cB$(C - -a 4 tt 

(3) W»f>%fF«:j:OjEeHatKl 3 0a-N©7i"fe 
X#^ffci&ofcJS£tt. 1 0b*>6r 

10 6&&>5l>tttt©^ 9 £7 vV'VrA flippy'- #£[H 
«?*t4#tt5*S. 

(4) nt*^-»4Sc-9Tl>4«KllijIl 30 b 
{C*tT5**Mffi«gl 0 0*6©7i'-te*tt}E5?*i 

[005 5] JJ2S&2©g£SBBjBTtt. BMH©1M 
MflJiPHfrTSiKc. fiP»tt. E£tt£K 1 3 0 a £ 

sjfBtt^g i 3 o b©rts*«-ai/-ci»s*»^-att© 

W©;-! » * 7 » r -f rt>#» 67"-^ Lr A»6 . 
20 3yB£P§«rfS. £U:«:J:»). ««t>»99CcJ:o-CE 

*>, sjsattsa 1 3 0 b ^mmhxmm^mKov 

[0056] -» 1 ©||]5«yf5^i^2 ©«f5!«©MM 

( 1 ) » 1 ©HJKfJ^ra. **Ma^g 1 0 0 a>6© 
7^ h«iffl©jeswfiB*^{t-rspii6tt**4. 
^2 ©njB^s-ctt. jesttSBs&miBi^&i*. 
30 ( 2 ) JftMftom^-r— *©H«rtt. m 1 ©^ 
SS?f5^r ttffl£ L fc r - * «: @HWfi6% ©«:>(♦ L 
t, 82©3IS&J$8rtt. ffitt!«a^«:40a-r<&£4B 

[005 7] 

[^W©3a*] *^©St»a->Xf-A{cJ:ntf. SJIB 
^afc^T^Jfeigfr^-^^-C^ai. -?-©fegFtW 

tt t> ttiESi©-a» » vtm^-&-c h z c t 

^S^K: J: 0 iEiEtt^g^^^Sli tt o fcB#(c . 

40 7 t -f©w«R*BJ!wai«B*>6*ijnif-ct. a^j«:*f®-r 

SCidipmcctt*. 
[@S©fSmtt^] 

[B 1 ] *ftW<D% 1 ©H«Sf^(CA>^ait»t5->^7- 
A©«fiS0T?AS. 

[S2 ] wstifA x*aaotiWEH"c*s. 
[S3 ] b » h 3^«€f -^a^waa-c**. 
04] m>L*t--7- <mm.m>ftim-z*>?>, 
[135] RMo.y-f:^mi«©fi«wsa*«r7o-? 

50 IH6] RVOLy-^^t^Cfit^H-C^S. 
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[07] RvoL#-r a wmvmmm*m 

[011] HRfH«ffieM»^*-r7a-*i'-J--C 
*4. s 
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[013] ESJtt.^tit&©tii^0r*£„ 

1 0 o-twisg 
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